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Abstract 

The paper describes an extension of well-founded semantics for logic programs with 
two types of negation. In this extension information about preferences between rules can 
be expressed in the logical language and derived dynamically. This is achieved by using 
a reserved predicate symbol and a naming technique. Conflicts among rules are resolved 
whenever possible on the basis of derived preference information. The well-founded conclu- 
sions of prioritized logic programs can be computed in polynomial time. A legal reasoning 
example illustrates the usefulness of the approach. 

1. Introduction: Why Dynamic Preferences are Needed 

Preferences among defaults play a crucial role in nonmonotonic reasoning. One source of 
preferences that has been studied intensively is specificity (Poole, 1985; Touretzky, 1986; 
Touretzky, Thomason, Sz Horty, 1991). In case of a conflict between defaults we tend to 
prefer the more specific one since this default provides more reliable information. E.g., if 
we know that students are adults, adults are normally employed, students are normally not 
employed, we want to conclude "Peter is not employed" from the information that Peter is 
a student, thus preferring the student default over the conflicting adult default. 

Specificity is an important source of preferences, but not the only one, and at least in 
some applications not necessarily the most important one. In the legal domain it may, for 
instance, be the case that a more general rule is preferred since it represents federal law 
as opposed to state law (Prakken, 1993). In these cases preferences may be based on some 
basic principles regulating how conflicts among rules are to be resolved. 

Also in other application domains, like model based diagnosis or configuration, pref- 
erences play a fundamental role. Model based diagnosis uses logical descriptions of the 
normal behaviour of components of a device together with a logical description of the actu- 
ally observed behaviour. One tries to assume normal behaviour for as many components as 
possible. A diagnosis corresponds to a set of components for which these normalcy assump- 
tions lead to inconsistency. Very often a large number of possible diagnoses is obtained. In 
real life some components are less reliable than others. To eliminate less plausible diagnoses 
one can give the normalcy assumptions for reliable components higher priority. 

In configuration tasks it is often impossible to achieve all of the design goals. Often one 
can distinguish more important goals from less important ones. To construct the best pos- 
sible configurations goals then have to be represented as defaults with different preferences 
according to their desirability. 
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The relevance of preferences is well-recognized in nonmonotonic reasoning, and priori- 
tized versions for most of the nonmonotonic logics have been proposed, e.g., prioritized cir- 
cumscription (Lifschitz, 1985), hierarchic autoepistemic logic (Konolige, 1988), prioritized 
default logic (Brewka, 1994a). In these approaches preferences are handled in an "external" 
manner in the following sense: some ordering among defaults is used to control the genera- 
tion of the nonmonotonic conclusions. For instance, in the case of prioritized default logic 
this information is used to control the generation of extensions. However, the preference 
information itself is not expressed in the logical language. This means that this kind of 
information has to be fully pre-specified, there is no way of reasoning about (as opposed to 
reasoning with) preferences. This is in stark contrast to the way people reason and argue 
with each other. In legal argumentation, for instance, preferences are context-dependent, 
and the assessment of the preferences among involved conflicting laws is a crucial (if not 
the most crucial) part of the reasoning. 

What we would like to have, therefore, is an approach that allows us to represent pref- 
erence information in the language and derive such information dynamically. In a recent 
paper (Brewka, 1994b) the author has described a variant of normal default logic in which 
reasoning about preferences is possible. Although the version of default logic presented 
in this earlier paper produces reasonable results in most cases, this approach has several 
drawbacks: 

1. The approach is computationally extremely demanding as it involves the construction 
of the Reiter extensions and an additional compatibility check for each extension 
guaranteeing that the preference information was taken into account adequately. 

2. It may happen that consistent default theories, i.e., theories whose strict part is sat- 
isfiable, possess no extensions at all. This is astonishing since in that paper we only 
dealt with normal defaults. The non-existence of extensions is due to defeasible pref- 
erence information. It is highly questionable whether such information should be able 
to destroy all extensions. 

3. The earlier paper did not take non- normal defaults into account, it is thus not general 
enough to cover normal logic programs with negation as failure. 

The approach presented in this paper will be based on extended logic programs with two 
types of negation. This means that in comparison with our earlier proposal we are more 
restrictive in one respect and more general in another: we are more restrictive since we 
do not allow arbitrary first order formulas as in normal default logic; we are more general 
since we admit negation as failure and hence rules which correspond to non-normal defaults 
in Reiter's logic. We also switch from the extension based semantics of default logic to 
well-founded semantics (van Gelder, Ross, 8z Schlipf, 1991; Przymusinski, 1991; Lifschitz, 
1996), i.e., to an inherently skeptical approach where the nonmonotonic conclusions are 
defined directly, not through the notion of extensions. It is well-known that well-founded 
semantics sometimes looses intuitively expected conclusions. This is also the case in our 
proposal. However, this is outweighed by a tremendous gain in efficiency: the well-founded 
conclusions can be computed in polynomial time. 

The outline of the rest of the paper is as follows: in Section 2 we first review a definition of 
well-founded semantics for logic programs with two types of negation which is based on the 
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double application of a certain anti-monotone operator. The definition extends Baral and 
Subrahmanian's formulation of well-founded semantics for normal logic programs (Baral &; 
Subrahmanian, 1991) and was used by several authors (Baral & Gelfond, 1994; Lifschitz, 
1996). We show that this definition suffers from an unnecessary weakness and present a re- 
formulation that leads to better results. Section 3, the main section of the paper, introduces 
our dynamic treatment of preferences together with several small motivating examples. We 
show that our conclusions are, in general, a superset of the well-founded conclusions. Section 
4 illustrates the expressive power of our approach using a more realistic example from legal 
reasoning. Section 5 shows that the worst case time complexity for generating well-founded 
conclusions for prioritized programs is polynomial. Section 6 investigates the relationship to 
Gelfond and Lifschitz's answer set semantics (Gelfond & Lifschitz, 1990). Section 7 discusses 
related work and concludes. 

2. Weil-Founded Semantics for Extended Logic Programs 

A (propositional) extended logic program consists of rules of the form 

c fli , . . . , a„ , noi bi, . . . , not 

where the Oj, hj and c are propositional literals, i.e., either propositional atoms or such atoms 
preceded by the classical negation sign. The symbol not denotes negation by failure (weak 
negation), denotes classical (strong) negation. For convenience we will sometimes use a 
rule schema to represent a set of propositional rules, namely the set of all ground instances 
of the schema. 

Extended logic programs are very useful for knowledge representation purposes, see for 
instance (Baral & Gelfond, 1994) for a number of illustrative examples. Two major seman- 
tics for extended logic programs have been defined: (1) answer set semantics (Gelfond h 
Lifschitz, 1990), an extension of stable model semantics, and (2) a version of well-founded 
semantics (Przymusinski, 1991). The second approach can be viewed as an efficient approx- 
imation of the first. 

Let us first introduce answer sets. We say a rule r G P of the form above is defeated by 
a literal I ii I = bi for some i G {1, . . . , m}. We say r is defeated by a set of literals X ii X 
contains a literal that defeats r. Furthermore, we call the rule obtained by deleting weakly 
negated preconditions from r the monotonic counterpart of r and denote it with Mon{r). 
We also apply Man to sets of rules with the obvious meaning. 

Definition 1 Let P be a logic program, X a set of literals. The X-reduct of P, denoted 
P^ , is the program obtained from P by 

• deleting each rule defeated by X, and 

• replacing each remaining rule r with its monotonic counterpart Mon{r). 

Definition 2 Let R be a set of rules without negation as failure. Cn[R) denotes the smallest 
set of literals that is 

1. closed under R, and 
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2. logically closed, i.e., either consistent or equal to the set of all literals. 
Definition 3 Let P be a logic program, X a set of literals. Define an operator 7p as follows: 

7P(X) = Cn(P^) 
X is an answer set of P iff X = ^p{X). 

A literal / is a consequence of a program P under answer set semantics, denoted / G Ans{P), 
iff / is contained in all answer sets of P. 

The second major semantics for extended logic programs, well-founded semantics, is an 
inherently skeptical semantics that refrains from drawing conclusions whenever there is a 
potential conflict. The original formulation of well-founded semantics for general logic pro- 
grams by Gelder, Ross and Schlipf (1991) is based on a certain partial model. Przymusinski 
reconstructed this definition in 3- valued logic (Przymusinski, 1990). The formulation using 
an anti-monotone operator was first given by Baral and Subrahmanian (1991) for general 
logic programs together with a corresponding definition for default logic. The straightfor- 
ward extension of this formulation (respectively, the restriction of the default logic defini- 
tion) to extended logic programs that will be introduced now was used by several authors, 
e.g. (Baral & Gelfond, 1994; Lifschitz, 1996).^ Note that in this paper we will only consider 
the literals that are true in the corresponding 3- valued semantics. 

Like answer set semantics the well-founded semantics for extended logic programs is 
based on the operator 7p However, the operator is used in a totally different way. Since 7p 
is anti-monotone the function Fp = (7p)^ is monotone. According to the famous Knaster- 
Tarski theorem (Tarski, 1955) every monotone operator has a least fixpoint. The set of 
well-founded conclusions of a program P, denoted WFS{P), is defined to be this least 
fixpoint of Tp. The fixpoint can be approached from below by iterating Fp on the empty 
set. In case P is finite this iteration is guaranteed to actually reach the fixpoint. 

The intuition behind this use of the operator is as follows: whenever 7p is applied to a 
set of literals X known to be true it produces the set of all literals that are still potentially 
derivable. Applying it to such a set of potentially derivable literals it produces a set of 
literals known to be true, often larger than the original set X. Starting with the empty 
set and iterating until the fixpoint is reached thus produces a set of true literals. It can be 
shown that every well-founded conclusion is a conclusion under the answer set semantics. 
Well-founded semantics can thus be viewed as an approximation of answer set semantics. 

Unfortunately it turns out that for many programs the set of well-founded conclusions is 
extremely small and provides a very poor approximation of answer set semantics. Consider 
the following program Pq which has also been discussed by Baral and Gelfond (1994): 

1) 6 not^b 

2) a not^a 

3) -la not a 

1. Pereira and Alferes (1992) introduced a version of well-founded semantics that adheres to the so-called 
coherence principle which requires that strong negation implies weak negation. We will show later in 
Sect. 3 how the coherence principle can be introduced in our approach. 
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The set of well-founded conclusions is empty since 7Pq(0) equals Lit, the set of all literals, 
and the Lit-reduct of Pq contains no rule at all. This is surprising since, intuitively, the 
conflict between 2) and 3) has nothing to do with -16 and b. 
This problem arises whenever the following conditions hold: 

1. a complementary pair of literals is provable from the monotonic counterparts of the 
rules of a program P, and 

2. there is at least one proof for each of the complementary literals whose rules are not 
defeated by Cn(P'), where P' consists of the "strict" rules in P, i.e., those without 
negation as failure. 

In this case well-founded semantics concludes / iff / G Cn(P'). It should be obvious that such 
a situation is not just a rare limiting case. To the contrary, it can be expected that many 
commonsense knowledge bases will give rise to such undesired behaviour. For instance, as- 
sume a knowledge base contains information that birds normally fly and penguins normally 
don't, expressed as the set of ground instances of the following rule schemata: 

1) fly{x) <— not^fly{x),hird{x) 

2) -^fly{x) not fly{x),penguin{x) 

Assume further that the knowledge base contains the information that Tweety is a penguin 
bird. Now if neither fly{Tweety) nor -^fly{Tweety) follows from strict rules in the knowl- 
edge base we are in the same situation as with Pq: well-founded semantics does not draw 
any "defeasible" conclusion, i.e. a conclusion derived from a rule with weak negation in the 
body, at all. 

We want to show that a minor reformulation of the fixpoint operator can overcome this 
intolerable weakness and leads to much better results. Consider the following operator 

-/*p{X) = Cl{P^) 

where Cl{R) denotes the minimal set of literals closed under the (classical) rules R. Cl{R) 
is thus like Cn{R) without the requirement of logical closedness. Now define 

Again we iterate on the empty set to obtain the well-founded conclusions of a program P 
which we will denote WFS*{P). 

Consider the effects of this modification on our example Pq. (0) = {a, b}. Rule 1) 
is contained in the {a, -la, 6}-reduct of Pq and thus rp^(0) = {b}. Since b is also the only 
literal contained in all answer sets of Pq our approximation actually coincides with answer 
set semantics in this case. 

In the Tweety example both fly{Tweety) and -^fly [Tweety) are provable from the 
0-reduct of the knowledge base. However, this has no influence on whether a rule not con- 
taining the weak negation of one of these two literals in the body is used to produce 7p(0) 
or not. The effect of the conflicting information about Tweety 's flying ability is thus kept 
local and does not have the disastrous consequences it has in the original formulation of 
well-founded semantics. 
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It is not difficult to see that the new monotone operator is equivalent to the original 
one whenever P does not contain negation as failure. In this case the X-reduct of P. for 
arbitrary X, is equivalent to P and for this reason it does not make any difference whether 
to use 7p or 7p as the operator to be applied first in the definition of Fp. The same is 
obviously true for programs without classical negation: for such programs Cn can never 
produce complementary pairs of literals and for this reason the logical closedness condition 
is obsolete. 

In the general case the new operator produces more conclusions than the original one: 

Proposition 1 Let P he an extended logic program. For an arbitrary set of literals X we 
have 

Tp{X) C TUX). 

Proof: We have 7p(X) C 7p(X), thus PT^'(^) C P7p(^). Prom this the result follows 
immediately. □ 

It remains to be shown that the new operator produces no unwanted results, i.e., that 
our new semantics can still be viewed as an approximation of answer set semantics. 

Proposition 2 Let P he an extended logic program. Let Ans{P) be the set of literals con- 
tained in all answer sets of P. WFS* is correct wrt. answer set semantics, i.e., WFS*{P) C 
Ans{P). 

Proof: The proposition is trivially satisfied whenever P has no answer set at all, or when 
Lit is the single answer set of P. So assume P possesses a non-empty set of consistent answer 
sets, the only remaining possibility according to results in (Gelfond & Lifschitz, 1990). 

To show that iterating Fp on the empty set cannot produce a literal s ^ Ans{P) it 
suffices to show that X C Ans{P) implies T*p{X) C Ans{P). 

Let A be an arbitrary answer set and assume X C Ans{P). Since X C A we have 
P^ C P^ . Since by assumption A is consistent we have A = Cn{P^) C Cl{P^). Therefore 
T*p{X) = CniP^^^P''^) C Cn(P^) = A. a 

For the rest of the paper a minor reformulation turns out to be convenient. Instead of 
using the monotonic counterparts of undefeated rules we will work with the original rules 
and extend the definitions of the two operators Cn and CI accordingly, requiring that weakly 
negated preconditions be neglected, i.e., for an arbitrary set of rules P with weak negation 
we define Cn{P) = Cn{Mon{P)) and Cl{P) = Cl{Mon{P)). We can now equivalently 
characterize 7p and 7p by the equations 

7P(X) = Cn{Px) 

7|.(X) = Cl{Px) 

where Px denotes the set of rules not defeated by X. 

Before we turn to the treatment of preferences we give an alternative characterization 
of Fp based on the following notion: 

Definition 4 Let P be a logic program, X a set of literals. A rule r is X-safe wrt. P 
(r G SAFEx{P)) if r is not defeated by ^p{X) or, equivalently, if r G P^*(x)- 
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With this new notion we can obviously characterize Fp as follows: 

T*p{X) = CnlP^J-W) = Cn(P^*(x)) = Cn{SAFEx{P)) 

It is this last formulation that we will modify later. More precisely, the notion of X-safeness 
will be weakened to handle preferences adequately. 

3. Adding Preferences 

In order to handle preferences we need to be able to express preference information explicitly. 
Since we want to do this in the logical language we have to extend the language. We do 
this in two respects: 

1. we use a set of rule names N together with a naming function name to be able to 
refer to particular rules, 

2. we use a special (infix) symbol -< that can take rule names as arguments to represent 
preferences among rules. 

Intuitively, ni -< n2 where rii and n2 are rule names means the rule with name ni is preferred 
over the rule with name 712.^ 

A prioritized logic program is a pair (i?, name) where i? is a set of rules and name a 
naming function. To make sure that the symbol -< has its intended meaning, i.e., represents 
a transitive and anti-symmetric relation, we assume that it! contains all ground instances of 
the schemata 

Ni^Ns^Ni^ N2, N2 -< Ns 

and 

^(A^2 -< Ni) ^ Ni-<N2 

where Ni are parameters for names. Note that in our examples we won't mention these 
rules explicitly. 

The function name is a partial injective naming function that assigns a name n & N 
to some of the rules in R. Note that not all rules do necessarily have a name. The reason 
is that names will only play a role in conflict resolution among defeasible rules, i.e., rules 
with weakly negated preconditions. For this reason names for strict rules, i.e., rules in which 
the symbol not does not appear, won't be needed. A technical advantage of leaving some 
rules unnamed is that the use of rule schemata with parameters for rule names does not 
necessarily make programs infinite. If we would require names for all rules we would have 
to use a parameterized name for each schema and thus end up with an infinite set N of 
names. 

In our examples we assume that N is given implicitly. We also define the function name 
implicitly. We write: 

Hi : c ai, . . . ,an, not bi, . . . ,not bm 
to express that name[c ai, . . . ,a„, not 61, ... , not b^) = ni. 

2. Note that for historical reasons we follow the convention that the minimal rules are the preferred ones. 
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For convenience we will simply speak of programs instead of prioritized logic programs 
whenever this does not lead to misunderstandings. 

Before introducing new definitions we would like to point out how we want the new 
explicit preference information to be used. Our approach follows two principles: 

1. we want to extend well-founded semantics, i.e. we want that every VFF5*-conclusion 
remains a conclusion in the prioritized approach, 

2. we want to use preferences to solve conflicts whenever this is possible without violating 
principle 1. 

Let us first explain what we mean by conflict here. Rules may be conflicting in several ways. 
In the simplest case two rules may have complementary literals in their heads. We call this 
a type-I conflict. Conflicts of this type may render the set of well-founded conclusions 
inconsistent, but do not necessarily do so. If, for instance, a precondition of one of the rules 
is not derivable or a rule is defeated the conflict is implicitly resolved. In that case the 
preference information will simply be neglected. Consider the following program Pi: 

ni : 6 not c 
n2 -(r- not b 
: n2 -< rii 

There is a type-I conflict between ni and 71-2 • Although the explicit preference information 
gives precedence to n2 we want to apply ni here to comply with the first of our two principles. 
Technically, this means that we can apply a preferred rule r only if we are sure that r's 
application actually leads to a situation where literals defeating r can no longer be derived. 
The following two rules exhibit a different type of conflict: 

a not b 
b not a 

The heads of these rules are not complementary. However, the application of one rule defeats 
the other and vice versa. We call this a direct type-II conflict. Of course, in the general case 
the defeat of the conflicting rule may be indirect, i.e. based on the existence of additional 
rules. We say ri and r2 are type-II conflicting wrt. a set of rules R iff 

1. Cl{R) neither defeats ri nor r2, 

2. Cl{R + ri) defeats r2, and 

3. Cl{R + r2) defeats ri 

Here R + r abbreviates R U {r}. A direct type-II conflict is thus a type-II conflict wrt. the 
empty set of rules. The rule sets R that have to be taken into account in our well-founded 
semantics based approach are subsets of the rules which are undefeated by the set of literals 
known to be true. Note that the two types of conflict are not disjoint, i.e. two rules may be in 
conflict of both type-I and type-II. Consider the following program P2, a slight modification 
of Pi: 
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ni : 6 not c, not^b 
122 '■ <— not b 

ns : n2 -< rii 

Now we have a type-II conflict between ni and 71-2 (more precisely, a direct type-II and a 
type-I conflict) that is not solvable by the implicit mechanisms of well-founded semantics 
alone. It is this kind of conflict that we try to solve by the explicit preference information. 
In our example n2 will be used to derive -16. Note that now the application of n2 defeats ni 
and there is no danger that a literal defeating n2 might become derivable later. Generally, a 
type-II conflict between ri and r2 (wrt. some undefeated rules of the program) will be solved 
in favour of the preferred rule, say ri, only if applying ri excludes any further possibility of 
deriving an ri-defeating literal. 

Note that every type-I conflict can be turned into a direct type-II conflict by a (non- 
equivalent!) rerepresentation of the rules: if each conflicting rule r is replaced by its semi- 
normal form^ then all conflicts become type-II conflicts and are thus amenable to conflict 
resolution through preference information. 

After this motivating discussion let us present the new definitions. Our treatment of 
priorities is based on a weakening of the notion of X-safeness. In Sect. 2 we considered a 
rule r as X-safe whenever there is no proof for a literal defeating r from the monotonic 
counterparts of X-undefeated rules. Now in the context of a prioritized logic program we 
will consider a rule r as X-safe if there is no such proof from monotonic counterparts of a 
certain subset of the X-undefeated rules. The subset to be used depends on the rule r and 
consists of those rules that are not "dominated" by r. Intuitively, r' is dominated by r iff 
r' is (1) known to be less preferred than r and (2) defeated when r is applied together with 
rules that already have been established to be X-safe. (2) is necessary to make sure that 
explicit preference information is used the right way, according to our discussion of Pi. 

It is obvious that whenever there is no proof for a defeating literal from all X-undefeated 
rules there can be no such proof from a subset of these rules. Rules that were X-safe 
according to our earlier definition thus remain to be X-safe. Here are the precise definitions: 

Definition 5 Let P = (R, name) be a prioritized logic program, X a set of literals, Y a set 
of rules, and r & R. The set of rules dominated by r wrt. X and Y, denoted Domx,Y{r), is 
the set 

{r' G i? I name{r) -< name{r') G X and Cl{Y + r) defeats r'} 

Note that Domx,Y{i') is monotonic in both X and Y . We can now define the X-safe rules 
inductively: 

Definition 6 Let P = {R, name) be a prioritized logic program, X a set of literals. The set 
of X-safe rules of P, denoted SAFE^^{P), is defined as follows: SAFE^^{P) = U^o^i, 
where 

Rq = 0, and for i > 0, 

Ri = {r E R \ r not defeated by Cl{Rx \ Domx,Ri_i{r))} 

3. The seminormal form of c ■<— ai, . . . , a„, not 61, ... , not 6„, is 

c ai, . . . , a„, not 61, ... , not 6„, , not c' 
where c' is the complement of c. The term seminormal is taken from Reiter (1980). 
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Note that X-safeness is obviously monotonic in X. Based on this notion we introduce a new 
monotonic operator T^: 

Definition 7 Let P = (R, name) be a prioritized logic program, X a set of literals. The 
operator Fp is defined as follows: 

TP;iX) = CniSAFEP^iP)) 

As before we define the (prioritized) well-founded conclusions of P, denoted WFS^^{P), as 
the least fixpoint of Fp . If a program does not contain preference information at all, i.e., 
if the symbol -< does not appear in i?, the new semantics coincides with WFS* since in 
that case no rule can dominate another rule. In the general case, since the new definition of 
X-safeness is weaker than the one used earlier in Sect. 2 we may have more X-safe rules and 
for this reason obtain more conclusions than via Fp. The following result is thus obvious: 

Proposition 3 Let P = (R, name) be a prioritized logic program. For every set of literals 
X we have F^(X) C T^piX). 

From this and the monotonicity of both operators it follows immediately that WFS*{R) C 
WFSP^'iP).^ 

Well-founded semantics has sometimes been criticized for being too weak and missing 
intended conclusions. The proposition shows that we can strengthen the obtained results 
by adding adequate preference information. 

As a first simple example let us consider the following program P3: 

ni : 6 •<— not c 
: c •<— not b 
ns : n2 -< m 

We first apply Fp^ to the empty set. Besides the instances of the transitivity and anti- 
symmetry schema that we implicitly assume only ria is in SAFE^^{Ps). We thus obtain 

Si = {n2 -< ni, -.(ni -< 712)} 

We next apply Fp^ to Si. Since n2 -< ni G Si we have ni G Doms^^${n2). n2 G SAFEg^^{P3) 
since C/(P3g^ \ {ni}) does not defeat n2 and we obtain 

5*2 = {"2 ^ ni, -■(ni -< n2),c} 

Further iteration of Fp^ yields no new literals, i.e. ^2 is the least fixpoint. Note that c is not 
a conclusion under the original well-founded semantics. 

We next show that the programs Pi and P2 discussed earlier are handled as intended. 
Here is Pi: 

4. Pereira and Alferes (1992) argue that each extension of well-founded semantics to two types of negation 
should satisfy what they call coherence principle: a weakly negated precondition should be considered 
satisfied whenever the corresponding strongly negated literal is derived. To model this principle in our 
approach one would have to weaken the notion of X-safeness even further. In the inductive definition, a 
rule r would have to be considered a member of Ri whenever for each weak precondition not 6 of r 

• b g Cl{Rx \DoTnx,Ri_i{r)), OT 

• b' ^ X, where 6' = -16 if 6 is an atom and o if 6 = -la. 
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ni : 6 not c 
122 '■ not b 

na : 712 ^ m 

Since 7pj(0) does not defeat ni this rule is safe from the beginning, i.e., ni G SAFE^^{Pi). 
r^''(0) yields 

{n2 -< ni,-.(ni -< n2),6} 

which is also the least fixpoint. The explicit preference does not interfere with the implicit 
one, as intended. 

The situation changes in P2 where the first rule in Pi is replaced by 
ni : 6 not c, not^b 

The new rule ni is not in SAFE^^ {P2) since it is defeated by the consequence of n2 and n2 
is not dominated by ni. rp^(0) yields 

Si = {n2 < rii, -■(rii -< 71.2)} 

Now 712 G SAFE^^^{P2) since n2 dominates ni wrt. 5i and the empty set of rules. We thus 
conclude -16 as intended. The least fixpoint is 

'S'2 = {n2 -< ni, -.(ni -< 712), b} 

In (Brewka, 1994b) we used an example to illustrate the possible non-existence of ex- 
tensions in our earlier approach. This example involved two normal defaults each of which 
had the conclusion that the other one is to be preferred. The prioritized logic programming 
representation of this example is the following: 

ni : 712 -< ni <— not^{n2 -< rii) 
n2 : Til ~< ^2 <— not^{ni -< 712) 

It is straightforward to verify that the set of well-founded conclusions for this example is 
empty. 

4. A Legal Reasoning Example 

In this section we want to show that the additional expressiveness provided by our approach 
actually helps representing real world problems. We will use an example first discussed by 
Gordon (1993, p. 7). We somewhat simplified it for our purposes. The same example was 
also used in (Brewka, 1994b) to illustrate the approach presented there. 

Assume a person wants to find out if her security interest in a certain ship is perfected. 
She currently has possession of the ship. According to the Uniform Commercial Code (UCC, 
§9-305) a security interest in goods may be perfected by taking possession of the collateral. 
However, there is a federal law called the Ship Mortgage Act (SMA) according to which 
a security interest in a ship may only be perfected by filing a financing statement. Such 
a statement has not been filed. Now the question is whether the UCC or the SMA takes 
precedence in this case. There are two known legal principles for resolving confiicts of this 
kind. The principle of Lex Posterior gives precedence to newer laws. In our case the UCC 



29 



Brewka 



is newer than the SMA. On the other hand, the principle of Lex Superior gives precedence 
to laws supported by the higher authority. In our case the SMA has higher authority since 
it is federal law. 

The available information can nicely be represented in our approach. To make the ex- 
ample somewhat shorter we use the notation 

c ^ ai, . . . ,an,not bi, . . . , not hm 

as an abbreviation for the rule 

c ai, . . . , a„, not 61, ... , not bm, not c' 

where c' is the complement of c, i.e. -ic if c is an atom and a if c = Such rules thus 
correspond to semi-normal or, if m = 0, normal defaults in Reiter's default logic (Reiter, 
1980). 

We use the ground instances of the following named rules to represent the relevant article 
of the UCC, the SMA, Lex Posterior (LP), and Lex Superior (LS). The symbols c?i and c?2 
are parameters for rule names: 

UCC : perfected ^ possession 
SMA : -^perfected ship, fin- statement 
LP{di,d2) : di -< d2 ^ rnore-recent[di,d2) 
LS{di,d2) : di -< ^2 ^ fed-law{di), state-law{d2) 

The following facts are known about the case and are represented as rules without body 
(and without name): 

possession 
ship 

^fin-statement 
more-recent{UCC, SMA) 
fed-law{SMA) 
state-law{UCC) 

Let's call the above set of literals H. Iterated application of Fp yields the following sequence 
of literal sets (in each case Si = (rp'^)*(0)): 

51 = H 

52 = Si 

The iteration produces no new results besides the facts already contained in the program. 
The reason is that UCC and SMA block each other, and that no preference information 
is produced since also the relevant instances of Lex Posterior and Lex Superior block each 
other. The situation changes if we add information telling us how conflicts between the 
latter two are to be resolved. Assume we add the following information:^ 

LS{SMA, UCC) -< LP{UCC, SMA) 

5. In realistic settings one would again use a schema here. In order to keep the example simple we use the 
relevant instance of the schema directly. 
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Now we obtain the following sequence: 

51 = HU {LS{SMA, UCC) -< LP{UCC, SMA), 

-^LP{UCC, SMA) ■< LSiSMA, UCC)} 

52 = SiU {SMA ^ UCC, -^UCC ■< SMA} 

53 = ^2 U {^perfected} 

54 = S3 

This example nicely illustrates how in our approach conflict resolution strategies can be 
specified declaratively, by simply asserting relevant preferences among the involved conflict- 
ing rules. 

5. Complexity 

The time complexity of well-founded semantics for a general logic program P is known to 
be quadratic in the size of P, a result attributed to folklore in (Baral 8z Gelfond, 1994). A 
proof was given by Witteveen (1991). His analysis is based on Bowling and Gallier's result 
whereby satisfiability of Horn clauses can be tested in linear time (Dowling &; Gallier, 1984). 
In Dowling and Gallier's approach it is actually a minimal model of a Horn theory that is 
computed in linear time. Since minimal models of Horn theories are equivalent to closures of 
rules without negation the result is directly applicable to well-founded semantics for general 
logic programs. It also applies to well-founded semantics for extended logic programs since 
for the computation of the least fixed point of Tp respectively Fp the complementary literals 
/ and -1/ can be viewed as two distinct atoms. 

For the complexity analysis of our prioritized approach let n be the number of rules 
in a prioritized program P = [Rename). A straightforward implementation would model 
the application of V^p in an outer loop and the computation of SAFE^ in an inner loop. 
Fortunately, we can combine the two loops into a single loop whose body is executed at 
most n times. The reason is that SAFE^ grows monotonically with X and Fp grows 
monotonically with SAFE^ . Here is a nondeterministic algorithm for computing the least 
fixed point of Fp^: 

Procedure WFS+ 

Input: A prioritized logic program P = [Rename) with \R\ = n 
Output: the least fixed point of Fp^ 
So := 0; 

Ro := 0; 

for i = 1 to n do 

if there is a rule r G Rs.^i \ Ri-i such that 
Cl{Rsi-i \ DomSi_i,Ri_i(r)) does not defeat r 
then Ri := Ri i + r; Si := Cn{Ri) 
else return Si-i 

endfor 
end WFS+ 
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In each step Si and Ri denote the well-founded conclusions, respectively safe rules estab- 
lished so far. The body of the for-loop is executed at most n times and there are at most 
n rules that have to be checked for satisfaction of the if-condition. The if-condition itself 
can, according to the results of Bowling and Gallier, be checked in linear time: we need 
to establish DomSi_i,Ri_i{r) which involves the computation of a minimal model of the 
monotonic counterparts of Ri-i + r. We then have to eliminate the rules dominated by r 
form Rsi-i and compute another minimal model to see whether r is defeated. 

More precisely. Bowling and Gallier show that the needed time is linear in the number 
of propositional constants. This number may be greater than n in principle. However, since 
literals that do not appear in the head of a rule must be false in the minimal model we can 
eliminate them accordingly and work with a set of rules that has at most n literals. This 
leads to an overall time complexity of ©(n"^). 

It should be mentioned, however, that due to the use of rule schemata for transitivity 
and anti-symmetry of -< prioritized programs can be considerably larger than correspond- 
ing unprioritized programs. The transitivity schema, for instance, has lA'^]^ instances. An 
implementation should, therefore, be based on an approach where instances are only gen- 
erated when actually needed, or on other built in techniques that handle transitivity and 
anti-symmetry. Such techniques are beyond the scope of this paper. 

6. Relation to Answer Sets 

In this section we will investigate the relation of our modification of well-founded semantics 
to answer set semantics (Gelfond & Lifschitz, 1990). Since our approach handles an extended 
language in which certain symbols are given a particular pre-defined meaning a thorough 
investigation of this relationship is only possible after a corresponding extension of answer 
set semantics to prioritized logic programs has been defined. We are not planning to intro- 
duce and defend such an extension in this paper. Nevertheless, we can give some preliminary 
results here. More precisely, we will show that the conclusions produced in our proposal are 
correct wrt. a particular subclass of answer sets, the so-called priority-preserving answer 
sets. 

Definition 8 Let R be a logic program, A an answer set of R, and let 

r = c -(^ ai, . . . , am not hi,. . . ,not hm 

he a rule in R. We say r is rebutted in A (r & reR{A) ) iff {ai, . . . , a„} C A and r is defeated 
in A. 

Definition 9 Let P = (R, name) he a prioritized logic program, A an answer set of R. A 
is called priority preserving iff for every r G reR{A) the set 

Cl{RA\DomA,RAr)) 

defeats r. 

The intuition behind the definition is the following: whenever a rule r is rebutted in an 
answer set A but its rebuttal is solely based on rules dominated by r with respect to A 
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and the rules not defeated by A we consider this as a violation of the available preference 
information and "reject" the answer set. 

We can now show correctness of our approach wrt. priority preserving answer sets. 

Proposition 4 Let P = {Rename) be a prioritized logic program. I G WFS^^{P) implies 
I is contained in all priority preserving answer sets of R. 

Proof: The proof is similar to the correctness proof of WFS* wrt. answer set semantics 
(Proposition 2). Again the proposition is trivially satisfied whenever there is no priority 
preserving answer set, or Lit is the single priority preserving answer set. We may therefore 
assume that every priority preserving answer set of R is consistent. 

In the inductive step we show that for an arbitrary priority preserving answer set A a 
rule r is not defeated in A whenever r G SAFE^{P), given that X is a set of literals true 
in A. Prom this it follows that Cn{SAFE^{P)) contains only literals true in all priority 
preserving answer sets. 

Let Ri be defined as in Def. 6 (the inductive definition of X-safeness) and assume it 
is already known that the rules in are not defeated in A. By definition r = c 

ai, . . . ,an,not bi,...,not bm G -Rj iff r is not defeated by Cl{Rx \ Domx,Ri_i{r)). We 
distinguish two cases: 

Case 1: ai, . . . , a„ G A: Since X C A and Dam is monotonic in both indices we have 
Cl{RA\L)omA,R^{r)) C Cl{Rx\Domx,Ri_i{r)). Therefore r cannot be defeated in A since 
A is priority preserving. 

Case 2: ai,...,a„ A: Since the prerequisites of r cannot be derived from Ra the 
set DomA,Rj^{r) contains only rules defeated by CI{Ra) alone. Since A is an answer set 
these rules can't be contained in Ra- Therefore CI{Ra) = CI{Ra \ DomA,Rjiir)) and 
thus CI{Ra) C Cl{Rx \ Domx,Ri_i{r)). Since by assumption A is consistent we also have 
CI{Ra) = Cn{RA) and therefore r cannot be defeated in A. □ 

We have seen that our approach is guaranteed to produce only conclusions contained in 
all priority preserving answer sets. We can also ask the opposite question: given a particular 
answer set A, is it al~ways possible to obtain A (or, more precisely, a superset of A containing 
additional preference information) through prioritized well-founded semantics by adding 
adequate preference information? 

The answer to this question is no. The reason is that for sake of tractability we always 
consider single rules when determining X-safeness in our approach. Here is an example: 

ni : 6 not a 
712 : c n-ot b 
nz : d -(r- not c 
: a not d 

This program has two answer sets Si = {b, d} and ^2 = {c, a}. Consider Si. Even if we add 
the preference information that both ni and ns are preferred to each of n2 and we are 
unable to derive b and d. For instance, ni is not X-safe because its head does not defeat n^. 

In order to derive 5*1 it would be necessary to take the possibility of sets of rules (here 
ni and n^) defeating less preferred sets of rules (here n2 and 77,4) into account. Although 
this is possible in principle it would clearly lead to intractability since in the worst case an 
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exponential number of subsets of rules would have to be checked. Giving up tractability 
seems too high a price for what is gained and we stick to our more cautious approach for 
this reason. 

7. Related Work and Conclusions 

Several approaches treating preferences in the context of logic programming have been 
described in the literature. We will now discuss how they relate to our proposal. 

Kowalski and Sadri (1991) proposed to consider rules with negation in the head as ex- 
ceptions to more general rules and to give them higher priority. Technically, this is achieved 
by a redefinition of answer sets. It turns out that the original answer sets remain answer sets 
according to the new definition whenever they are consistent. The main achievement is that 
programs whose single answer set is inconsistent become consistent in the new semantics. 
The approach can hardly be viewed as a satisfactory treatment of preferences for several 
reasons: 

1. preferences are implicit and highly restricted; the asymmetric treatment of positive 
and negative information seems unjustified, 

2. it is difficult to see how, for instance, exceptions of exceptions can be represented, 

3. fewer conclusions are obtained than in the original answer set semantics, contrary to 
what one would expect when preferences are taken into account. 

It is, therefore, more reasonable to view Kowalski and Sadri's approach as a contribution 
to inconsistency handling rather than preference handling. 

An approach that is closer in spirit to ours is ordered logic programming (Buccafurri, 
Leone, & Rullo, 1996). An ordered logic program is a set of components forming an inheri- 
tance hierarchy. Each component consists of a set of rules. The inheritance hierarchy is used 
to settle conflicts among rules: rules lower in the hierarchy have preference over those higher 
up in the hierarchy since the former are considered more specific. A notion of a stable model 
for ordered logic programs can be defined (see Buccafurri et al., 1996, for the details). 

There are two main differences between ordered logic programs and our extension of 
well-founded semantics: 

1. ordered logic programs use only one kind of negation, the distinction between negation 
as failure and classical negation is not expressible in the language, 

2. the preferences of ordered logic programs are predefined through the inheritance hi- 
erarchy, there is no way of deriving context-dependent preferences dynamically. 

Finally we would like to mention an approach recently presented by Prakken and Sartor 
(1995). They extend Dung's argument system style reconstruction of logic programming 
(Dung, 1993) with a preference handling method that is very close to ours. This is not 
astonishing since, as the authors point out, their approach is based on "unpublished ideas 
of Gerhard Brewka". In fact, it was a preliminary version of this paper that led to their 
formulation. 
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We presented in this paper an extension of logic programs with two types of negation 
where preference information among rules can be expressed in the logical language. This ex- 
tension is very useful for practical applications, as was demonstrated using an example from 
legal reasoning. The main advantage of our approach is that also this type of information 
is context-dependent and can be reasoned upon and derived dynamically. 

Prom well-founded semantics we inherit some drawbacks and advantages. Sometimes 
reasonable conclusions are not obtained. On the other hand, the addition of preference in- 
formation can make the set of conclusions considerably larger, as we have shown. Moreover, 
- and this certainly is the greatest advantage of well-founded semantics and our proposed 
extension - reasoning can be done in polynomial time. 

The simple and natural representation of the legal example discussed in Sect. 4 seems 
to indicate that our generalization of well-founded semantics may provide a new attractive 
compromise between expressiveness and efficiency with a number of interesting potential 
applications. 
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